Skip to content

Cherry-picks for v2.11.11-RC.1#7480

Merged
neilalexander merged 31 commits intorelease/v2.11.11from
backports/v2.11.11-RC.1
Oct 28, 2025
Merged

Cherry-picks for v2.11.11-RC.1#7480
neilalexander merged 31 commits intorelease/v2.11.11from
backports/v2.11.11-RC.1

Conversation

@neilalexander
Copy link
Copy Markdown
Member

@neilalexander neilalexander commented Oct 28, 2025

neilalexander and others added 29 commits October 28, 2025 11:24
…ling

Signed-off-by: Neil Twigg <neil@nats.io>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
Signed-off-by: Neil Twigg <neil@nats.io>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
When enabling FIPS 140-3 mode with `GODEBUG=gofips=X` on supported platforms,
the following restrictions are made to allow NATS to function:

1. `auth_callout` cannot be configured and will error at startup if it is;
2. `chacha` filestore encryption mode cannot be configured and will
   error at startup if it is;
3. `X25519` is removed from the default curve preferences;
4. TLS handshakes that require non-FIPS-compliant algorithms will fail.

Signed-off-by: Neil Twigg <neil@nats.io>
Signed-off-by: Neil Twigg <neil@nats.io>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
Signed-off-by: Rodney Osodo <socials@rodneyosodo.com>
Signed-off-by: Neil Twigg <neil@nats.io>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
The first load of the last sequence via `firstMatching` or `firstMatchingMulti`
will still continue to flag `expireOk`, as though we're optimising for the linear
scan case, but if it becomes apparent that we are continuously reloading the same
last sequence over and over again in this way, don't set `expireOk` or we'll just
keep expiring and reloading the cache each time.

Signed-off-by: Neil Twigg <neil@nats.io>
Signed-off-by: Michael Röschter <michael@roeschter.de>
Setting the "hop" header for each gateway could cause header
corruption. This is now fixed.

A test dealing with gateway has been improved to include more than
one gateway, which would have demonstrated the issue. The test now
passes and ensures that the hop is different per gateway.

Related to #7442

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
…messages

Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
Signed-off-by: Neil Twigg <neil@nats.io>
Signed-off-by: Neil Twigg <neil@nats.io>
Signed-off-by: Alex Bozhenko <alexbozhenko@gmail.com>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
@neilalexander neilalexander changed the title Cherry-picks for v2.11.1-RC.1 Cherry-picks for v2.11.11-RC.1 Oct 28, 2025
Copy link
Copy Markdown
Member

@MauriceVanVeen MauriceVanVeen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

neilalexander and others added 2 commits October 28, 2025 17:09
…snapshotting

Signed-off-by: Neil Twigg <neil@nats.io>
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
@neilalexander neilalexander force-pushed the backports/v2.11.11-RC.1 branch from 3d3edf9 to 36fddba Compare October 28, 2025 17:09
@neilalexander neilalexander marked this pull request as ready for review October 28, 2025 17:46
@neilalexander neilalexander requested a review from a team as a code owner October 28, 2025 17:46
Copy link
Copy Markdown
Member

@wallyqs wallyqs left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@neilalexander neilalexander merged commit 2c24fea into release/v2.11.11 Oct 28, 2025
69 of 70 checks passed
@neilalexander neilalexander deleted the backports/v2.11.11-RC.1 branch October 28, 2025 17:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants